I additionally:
1) created both a user & role in
/tomcat/conf/tomcat-users.xml
2) the same in:
server/config/fedora-users.xml
3) added a role in the section regarding APIA
<security-constraint>
<web-resource-collection>
<web-resource-name>Fedora Repository Server</web-resource-name>
<description>Fedora-generated security-constraint</description>
<description>APIA</description>
<url-pattern>/</url-pattern>
<url-pattern>/describe</url-pattern>
<url-pattern>/get/*</url-pattern>
<url-pattern>/getAccessParmResolver</url-pattern>
<url-pattern>/getObjectHistory/*</url-pattern>
<url-pattern>/listDatastreams/*</url-pattern>
<url-pattern>/listMethods/*</url-pattern>
<url-pattern>/oai</url-pattern>
<url-pattern>/report</url-pattern>
<url-pattern>/risearch</url-pattern>
<url-pattern>/search</url-pattern>
<url-pattern>/services/access</url-pattern>
<url-pattern>/wsdl</url-pattern>
<url-pattern>*.jsp</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>myuserrole</role-name>
</auth-constraint>
4) the same at the end of this file
<security-role>
<role-name>administrator</role-name>
<role-name>myuserrole</role-name>
</security-role>
5) I reloaded policies
and still thre's no positive result.... Do you have any idea what I'm doing
wrong?
Regards,
Damian
===8<===============Treść oryginalnej wiadomości===============
Dear All,
I'm trying to use SaxonServlet provided within FC where xml-source is
one of the objects DC
http://server:port/fedora/get/ns:myobject/DC
style is url pointing to a file located under the same tomcat as
fedora but different context
http://server:port/othercontext/stylesheet.xsl
so the whole url looks like:
http://server:port/saxon/SaxonServlet?source=http://server:port/fedora/get/ns:myobject/DC&style=http://server:port/othercontext/stylesheet.xsl&clear-stylesheet-cache=yes
After that I get the exception:
java.io.IOException: HTTP request failed. Got status code 401 from remote
server while attempting to GET http://server:port/fedora/get/ns:myobject/DC
at
org.fcrepo.localservices.saxon.SaxonServlet.getInputStream(SaxonServlet.java:272)
at
org.fcrepo.localservices.saxon.SaxonServlet.apply(SaxonServlet.java:202)
at
org.fcrepo.localservices.saxon.SaxonServlet.doGet(SaxonServlet.java:148)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
at java.lang.Thread.run(Thread.java:619)
I checked Saxon's web.xml flie and and tried to provide fedora's username
and
passwd for this context
<init-param>
<param-name>http://server:port/fedora/get/ns:myobject/DC</param-name>
<param-value>user:pass</param-value>
</init-param>
But it still doesn't work...
Do you know what might be an issue? xacml policy? (for tests purposes
I set <param name="ENFORCE-MODE" value="permit-all-requests"/> )
Best regards,
Damian
------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Fedora-commons-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
===8<===========Koniec treści oryginalnej wiadomości===========
--
Pozdrowienia,
Damian Kaliszan------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Fedora-commons-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users